[Webkit-unassigned] [Bug 232512] Avoid corrupting the hashmap and subsequent nullptr deref by checking that the LayoutUnit is not a deleted value.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Nov 5 15:20:19 PDT 2021


https://bugs.webkit.org/show_bug.cgi?id=232512

Radar WebKit Bug Importer <webkit-bug-importer at group.apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |InRadar

--- Comment #8 from Radar WebKit Bug Importer <webkit-bug-importer at group.apple.com> ---
<rdar://problem/85087814>

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20211105/3bf4fd97/attachment.htm>


More information about the webkit-unassigned mailing list